RSEC-2025-1
See a problem?- Import Source
- https://github.com/RConsortium/r-advisory-database/blob/main/vulns/plotly/RSEC-2025-1.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/RSEC-2025-1
- Upstream
- Published
- 2025-12-23T15:00:00Z
- Modified
- 2025-12-26T23:08:35.858759Z
- Summary
- Risk of __proto__ pollution Vulnerability
- Details
-
The plotly R package up through the latest 4.11.0 includes plotly.js library 2.11.1. Plotly.js releases prior to version 2.25.2 have a risk of proto being polluted in expandObjectPaths or nestedProperty.
- References
Affected packages
CRAN / plotly
Package
- Name
- plotly
- Purl
- pkg:cran/plotly